Smx Series 23 Ups Firmware

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-0715 CRITICAL Act Now

A CWE-287: Improper Authentication vulnerability exists that could cause an attacker to arbitrarily change the behavior of the UPS when a key is leaked and used to upload malicious firmware. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Smt Series 1015 Ups Firmware Smc Series 1018 Ups Firmware Smtl Series 1026 Ups Firmware Scl Series 1029 Ups Firmware +29

NVD VulDB

CVSS 3.1

9.1

EPSS

1.1%

CVE-2022-0715

EPSS 1% CVSS 9.1

CRITICAL Act Now

A CWE-287: Improper Authentication vulnerability exists that could cause an attacker to arbitrarily change the behavior of the UPS when a key is leaked and used to upload malicious firmware. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Smt Series 1015 Ups Firmware Smc Series 1018 Ups Firmware +31

NVD VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy